安信证券 蒋渐峰 安信证券DevOps探索与实践 转型背景 01 工具平台建设 02 试点项目实践 03 目录 CONTENTS 持续改进 04 目标：以研发团队为中心，在端到端流程串联、流程自动化、度量精化、质量增强、资源自助化几个重点方面发力， 打造研发管理平台，提供具备快速交付、高质量、过程透明、可度量的IT研发服务供应链。 证券业务的复杂性： 证券业务种类多，业务规则复杂，业 升自动化的能力和水平 ⚫ 帮助团队获得初期的成 功 ⚫ 推广使用：自研系统覆盖50%->90% ⚫ 各平台功能在垂直领域进一步深化 ⚫ 工具的稳定性、可靠性，以及大规模使用的 性能问题 ⚫ DevOps文化的推行，培训赋能 ⚫ 统一界面、简化操作 ⚫ 平台治理 ⚫ 标准化、自动化、服务化、数据化 ⚫ 刚刚跨过转型初期，通过提升自动化能力和 水平，快速获得初期成功 ⚫ 随着交付能力的提升，质量能力和技术债务

Kubernetes management platforms need to confidently deliver: • Simplified Cluster Operations: improved DevOps efficiencies with simplified cluster operations • Consistent Security Policy and User Management: By simplifying and automating cluster operations, Kubernetes Management Platforms seek to improve DevOps efficiencies. Feature SUSE Rancher OpenShift Tanzu Anthos Install and Operations 4 3 Application Catalog 4 4 3 1 Provision with Config Management Systems 4 3 3 3 Integration with CI/CD Solutions 3 4 2 4 Advanced Monitoring 4 4 3 2 Alerts and Notifications 4 4 3 2 External

cloud-native architectures, CN2 takes advantage of the benefits that Kubernetes offers, from simplified DevOps to turnkey scalability, all built on a highly available platform. These benefits include leveraging providers alike. Enterprises and service providers can now manage Contrail using simplified and familiar DevOps tools and processes without needing to learn a new life cycle management (LCM) paradigm. Benefits the CN2 Web UI to configure and monitor your network. • Leverage the skill set of your existing DevOps engineers to quickly get CN2 up and running. • Combine with Juniper Networks fabric devices and

introduction to using replica sets and the Rancher Catalog. Additional eBooks o Building a CI/CD Pipeline with Rancher and Docker: a hands-on guidebook for introducing containers into your build roles spanned from consulting Fortune 500 customers on DevOps assessment to hands down platform building for internet scale companies. Vishal is a DevOps practitioner, likes to work in Agile environments environments with focus on TDD. Vishal's interests span continuous delivery, enterprise DevOps, containers and security. When not typing, Vishal can be found cycling, photographing or flipping pages. infraCloud

Alerting ※※※※ ※※※※※ ※※※※ Notification ※※※※ ※※※ ※※※※※ Application Template ※※※※ ※※※※※ ※※※※ CI/CD Pipeline ※※※※※ ※※※※※ ※※※ Application Lifecycle Management ※※※※※ ※ ※ Metering & Billing ※※※※※ and WeCom Pagerduty supported Pagerduty, Microsoft teams, DingTalk, and WeCom supported DevOps Application packaging and publishing Source-to-Image and Binary-to-Image supported Source-to-Image Source-to-Image and Binary-to-Image supported Source-to-Image and Binary-to-Image not supported CI/CD Pipeline Jenkins pipelines supported with built-in graphical editing panels Jenkins pipelines

used to spend on manual configuration and security, we can now spend more usefully.” Adrian Lüthi DevOps specialist Inacta AG Copyright © SUSE 2021 SunnyVision can now leverage the native Kubernetes Node Node Node Node Node Node Control Plane Worker etcd MSP Admin Customer B DevOps: End user Customer A DevOps: End user Copyright © SUSE 2021 Namespace/Container as a Service Rancher Management Product Qty Nodes Rancher Management Server 3 0 Rancher Nodes 53 53 ITOps Admin: End user DevOps: End user Copyright © SUSE 2021 Copyright © SUSE 2021 SUSE Partner Solution Stacks 15 Copyright

installation and operations, whether they are on-premises, in the cloud, or at the edge, giving the DevOps team freedom to build and run containerized applications anywhere. The PowerFlex family offers Manager REST APIs and custom Ansible modules to integrate with your infrastructure, application, and DevOps workflows. PowerFlex Manager enables automated deployments and expansions with minimal firsthand

Secrets Management at Scale with Vault & Rancher 24. June Robert de Bock Senior DevOps Engineer Adfinis robert.debock@adfinis.com Kapil Arora Senior Solution Engineer HashiCorp kapil@hashicorp.com

tarball has been extracted, the following commands will compile the module: 1. cd boringssl 2. mkdir build && cd build && cmake -GNinja -DCMAKE_TOOLCHAIN_FILE=${HOME}/toolchain - DFIPS=1 -DCMA

directory structure on rst the master node $ sudo mkdir -p /var/lib/rancher/rke2/server/manifests $ cd /var/lib/rancher/rke2/server/manifests Then create the le rancher-vsphere-cpi-config.yaml in the sap.com: https://help.sap.com/viewer/a8d90a56d61a49718ebcb5f65014bbe7/3.3.latest/en-US/ e8d4c33e6cd648b0af9fd674dbf6e76c.html . 6.2 Upgrade or update This section explains how you can keep your installation